5.3 Configuring Dell EMC Monitoring

Change Guardian monitors the Dell EMC file systems on Isilon and Unity storage platforms. This section provides information about the following.

Figure 5-3 Dell EMC Monitoring using Change Guardian

The deployment diagram illustrates the following:

  • Dell EMC CEE collects events from the Dell EMC machine. For more information about Dell EMC CEE, see Using the Common Event Enabler for Windows in the Dell EMC website.

  • SmartConnector for Change Guardian acts as the interface between Dell EMC and Change Guardian. It pulls event data from Dell EMC CEE and stores the event details in a CEF log file.

  • Change Guardian Agent for Windows reads from the CEF log file and sends the event details to the Change Guardian server.

5.3.1 Implementation Checklist

Complete the following tasks to monitor Dell EMC:

Task

See

Complete the prerequisites

Prerequisites

Add a license key

Adding a License Key

Configure Change Guardian for Dell EMC monitoring

Configuring Change Guardian

Working with Policies

Triage events

Section 7.0, Managing Events

Section 8.0, Configuring Alerts

5.3.2 Prerequisites

Ensure that you have completed the following:

5.3.3 Configuring Change Guardian

Complete the following procedures to configure Change Guardian to monitor Dell EMC events:

Enabling Dell EMC Monitoring

You must configure Change Guardian server and SmartConnector for Change Guardian to receive Dell EMC event logs.

Prerequisites Ensure that you have added Dell EMC asset in Agent Manager.

To enable monitoring:

  1. In Agent Manager, select the asset and click Manage Installations > Reconfigure Agents.

  2. In the Reconfigure Agents page, edit the configuration to select Enable Smart Connector Plugin.

  3. Specify the location to store CEF events in CEF Data Output Path.

    NOTE:Ensure that the value in CEF Data Output Path matches the CEF data path that you had specified during SmartConnector for Change Guardian installation. You can get the CEF data path from ceffolder parameter in the <install_directory>\current\user\agent\agent.properties.

Creating Dell EMC Policies

You can create file system policies to generate events about files and directories when they are created, deleted, renamed, permission changed, and so on.

While creating file system policies, specify the EMC shared path in the following format: \\hostname\device type identifier\local sub folder.

For example for Isilon specify \\onefs8104-1\onefs$\ifs\<local sub directory>, and for Unity specify \\onefs8104-1\CHECK$\ifs\<local sub directory>. Here \\onefs8104-1 is the host name and \ifs\<local sub directory> is the directory you want to monitor.

NOTE:It is recommended to monitor the file system of Dell EMC Unity storage. For example, specify the path as \\Unity-1\CHECK$\LocalFS in Policy Editor, where LocalFS is the Dell EMC Unity file system name.

For information about creating policies, see Creating Change Guardian Policies.

After creating policies, you can assign them to assets. For information about assigning policies, see Working with Policies.